Cisco PIX woes with MS Cert Service on Windows 2000

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - All access rights gone I recently made a test account to restrict access on a terminal server(TS). After I denied that account from accessing other patrs and folders of the TS I noticed that some other user rights were also gone. Now I have some important files without any user rights at all and I can't access or copy them. How can I get access to those files? I have tried with admin rights both local and domain but nothing works. Is there a way to work around security rights in windows? Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87545
  - 2
    - Access is Denied Please help! I have 2 computers and I transferred one hard drive from one to the other. I did have a password set on that drive as you entered Windows XP. Now on the other computer, the harddrive's folders show up but ACCESS IS DENIED to most including My Documents because I must have encrypted it at some point I think. Or is it the password that's causing it to be accessed. How do I bypass/get rid of the passwords/encryption? I hope that my explanation is clear enough. Thanks for any tips. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87538
  - 3
    - New Security-related Msg New to this group, so please bare w/me. NEW, very new msg appears each and every time a new web page is displayed. Reads: Security Warning . . . . . Current Web pag is trying to open a site in your Trusted sites list. Then: Current Site: current page is noted. Next line: Trusted site: about:blank Select: Yes or No Where did this come from? What/where is my "Trusted Sites" list? Thank You! Wayne Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87529
  - 4
    - Non-MS Cert Req -- How to sign with Microsoft CA? I want to generate a cert request on a Linux box (for an Apache-based web server) and sign it using our Microsoft CA. The CA rejects the certificate because it doesn't contain Microsoft templates and/or extensions. Can I do this? Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87523
  - 5
    - New MSSECURE Version 2006.08.22 Available MSSECURE.XML Data Version 2006.08.22.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, August 24, 2006, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 1 re-release bulletin supporting the refresh of MS06-042. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87515
  - 6
    - Password Protect File and/or Folders Hello. I'm looking for a way to simply password protect files and/or folders. My goal is to have a folder for each member or our management team that has a password on it. So far, I've use compressed files which works well enough but we want to be able to write back to the files without having to save them then move them back into the compressed folder. This has been an issue as files read in compressed folders are Read Only. Any help provided would be very helpful. Thank you for your time. Zach Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87513
  - 7
    - Access Control Models What are the different default and optional access control models for the following systems: Win NT Win 2000 (workstation and server) Win XP Win 2003 Server I read multiple reports that differ in opinion. Some say DAC for NT and 2000 and others say MAC and then some others say RBAC. I think that an upgrade exists to enable RBAC in NT and 2000 but that default it is DAC. Did Microsoft first introduce RBAC in Windows XP and 2003? Thanks! Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87511
  - 8
    - CREATOR OWNER assigning issue I am working on hardening WinXP systems for the corporation I am employed with, and a certain security setting I am trying to implement designated that the CREATOR OWNER account is to have Full Access to subfolders and files only (file and folder permission/registry permission); however no matter what I have tried it will not allow me to add CREATOR OWNER stating it does not exist in the Domain (being tested in a lab setting first, which I know it exists as it shows up everywhere I look). I have implemented all other system security settings and hooked the machine up to an active environment to try it out, and it would allow me to add CREATOR OWNER from the live Domain, but does not allow me to change rights. I do have administrator access to make the changes, and this is the only issue I have encountered and wondered if anyone out there may have an idea as to what may be the cause behind this. Thanks for any assistance Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87507
  - 9
    - Event log shows NTLM not Kerberos I have a SBS 2000 server with a win 2003 backup DC, all workstatsions are XPSP2., yet I find that users are logging in with Authentication Package: NTLM. Shouldn't they be using Kerberos? If so what could be making them fall back to NTLM Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87487
  - 10
    - Microsoft patch opens users to attack Microsoft patch opens users to attack "The flaw, initially thought to only crash Internet Explorer, actually allows an attacker to run code on computers running Windows 2000 and Windows XP Service Pack 1 that have applied the August cumulative update to Internet Explorer 6 Service Pack 1, security firm eEye Digital Security told SecurityFocus on Tuesday. The update, released on August 8, fixed eight security holes but also introduced a bug of its own, according to Marc Maiffret, chief hacking officer for the security firm, which notified Microsoft last week that the issue is exploitable." http://www.securityfocus.com/news/11408?ref=rss --Imhotep Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87481
  - 11
    - Disable Administrator Logoffs Hi, I work in a large W2K3 Server environment with several server admins. I'm having problems with other admins logging me off of servers that are locked. More than once a scripts been stopped or a file copy has been interupted. Is there a way to disable logoffs by the other admins? I'm ok if it disables it for me as well. I'd like for the admins to get in the habit of asking the person that's logged on,if it's ok to log them off. Thanks, Ishmeal Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87479
  - 12
    - DOS game crashes XP Hello. A DOS game downloaded from http://www.reloaded.org/download/Castle-Wolfenstein/24/ is able to completely lock up Windows XP running on a Duron system. The game loads, but runs in an extremely fast loop. There is no way to exit the game gracefully, so I press Alt + Enter to switch from fullscreen to Window mode. At this point my screen goes black and the keyboard is useless. I must do a hardware reset. How is this DOS game able to crash Windows XP? I found that if I launched the game at a very slow speed with Mo'Slo 4BIZ, I was able to use Alt + Enter, but instead of having the game appear FROZEN in a window, it was minimized. I could then close the game while minimized, but if I pressed Alt + Enter again, Windows locked up with black screen. Here's an oddity: With game minimized, I opened Task Manager. I saw a new process appear: wuauclt.exe. According to MS, this is the auto update process, but I don't have auto update enabled. How is this DOS game able to crash Windows XP? What would cause wuauclt.exe to suddenly run? thx, nf Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87463
  - 13
    - Cert Server and RMS Is it a must that RMS be deployed on an Enterprise CA? Or can I have it installed on a subordinate Enterprise CA? -- Jerry Reddick Systems Administrator EMC Product Implementer/Specialist MSN Communications, Inc. Colorados Largest Cisco Gold Partner Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87449
  - 14
    - Security Templates on Windows XP Professional SP1 and SP2 Are there any differences between the security templates on XP Professional SP1 and SP2. The security template customized for SP1 works fine, however, when it is applied to a workstation with XP SP2, the administrator encountered access issue to Logical Disk Manager, cannot enable personal firewall, saying ShareAccess issue, etc. Any suggestions/commetns are much appreciated. Thanks, Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87448
  - 15
    - Slow FTP initial connection through XP firewall I am running a XP pro machine with the windows firewall enabled. I want to regularly FTP or RCP a small file from this XP machine to a single Linux machine, but when I initiate the connection, there is around a 30 second lag before I am prompted with a request for a username (using FTP). When I turn off the XP firewall, there is no 30 second lag. I've tried opening all the FTP ports on my XP firewall, but it's not fixing the problem. I'm not familiar with how this is working, but it seems that when I try to initiate a connection to this Linux machine, the Linux machine then tries to talk back to the XP machine, but is being blocked by the windows firewall. Is there some port that I can open up (just to this Linux machine) that will allow this "reverse connection"? Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87447
  - 16
    - How to remove an applied security template on XP SP2 Let say, a XP SP2 standalone workstation have "securews.inf" applied. Now, the security folks wanted to have "hisecws.inf" applied instead. Do I need to "uninstall" securews.inf before installing hisecws.inf? If it is required, what would be the steps? Kindly point out the sources for these steps. If it is not required, will the "newl" security template replace all settings of securews.inf? Thanks! Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87445
  - 17
    - virus sent in yousendit email notification Yesterday I got an email from yousendit - the company which enables you to send large zipped files by filling in a form to upload to their site, and the other party downloads them at the other end - via a notification email from yousendit . (I think that is how it works!) Anyway, this time the email was just filled with a large advertisement. There were no refs to a download - as there usually is. Almost immediately afterwards I got a note from Norton anti virus saying that 2 risks had been repaired (I think deleted...) 1. Downloader virus. 2. Trojan.ByteVerify virus. I tried to visit the yousendit site myself and log in, but got a page of typing that looked like the page underwriting or supporting the normal yousendit form, rather than the form itself. The yousendit file that Norton picked up, was one of several that I was expecting (I knew a friend would be sending me 2 or 3.) I deleted all of them, just in case. I know he sent the same files to another friend, and she received them free of viruses, without any problems. The problem therefore does not seem to be coming from his computer. This morning I saw that there was another yousendit notification email in my inbox. It refered to a photograph that I sent someone about 2 weeks ago. The person I sent it to says she knows nothing about this email, and it seems highly suspicious. I have deleted it. I have changed my gmail account filter so that all yousendit files will in future be deleted as spam, Maybe I need to set up an account dedicated only to yousendit ? If any problems occurred again, it would at least be easy just to close the account. I wondered if others had experienced this problem and how they dealt with it. Yousend it is an invaluable resource, and not one I want to lose. Suggestions would be most welcome. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87441
  - 18
    - Easy Start Button (Easy Start Button)I notice a green button icon "ESB" on my desktop taskbar. Despite exiting and using uninstall via the Start/Programs menu it re-installs itself at re-boot, so I assume there are registry entries I need to remove to clean my PC (running Windows XP). Can you tell me, step-by-step, how to remove the relevant registry entries (or is there a program, preferably shareware/freeware that will do it automatically? Many thanks! Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87433
  - 19
    - Parental control How do I make the computer shut down automatically at night so my teenagers will not be able to stay up late? Thanks Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87417
  - 20
    - Error messages picked up by Spybot I am a McAfee subsciber but also use Spybot to run a check. Last Saturday it brought up 3 files that posed a security risk. They all began: Windows Security Centre Then after the first it had Disabled, after the second Disable Notify and after the third Firewall Disable Notify. I have checked the McAfee setting and they are all operational and Spybot blocked these items, but what do they mean and can I be sure that the system is working ok? Thanks Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87412
  - 21
    - Auth and name resolution over external trust Hi, I'd just like to double check this... When there is an uplevel (trusttype=2) external trust between two Win2003 domains in different forests (note, not a forest root trust), then will the auth method still be NTLM for this? If so, will this work OK with DNS name resolution only (no WINS)? Thanks! -- -Dave Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87411
  - 22
    - erunt and erdnt Hello, I see several erunt and erdnt files on my computer. I never installed these. I have no adwaire or spyware. Any ideas how they got there and should I worry? They are not in control panel add/remove. http://www.larshederer.homepage.t-online.de/erunt/erunt.txt I did send an Email to the contact us (lars.hederer@t-online.de), but I got no reply. Paul Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87406
  - 23
    - Wireless authentication in SBS Server 2003 Could anybody please tell me how to disable Wireless Authentication in Windows SBS Server 2003 as currently not allowing authentication with CE.NET wireless device even when entering valid user account/password on the mobile device. I beleive it may have something to do with removing 802.xx certificate checking in server Group Policy but I can't get it to work. Any help greatly appreciated! -- Ben (Databasics Hospitality Systems Ltd) Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87402
  - 24
    - Process Policy Negotiation I am looking for a reference for any Windows Kernel Level Policy Negotiation either at the process based or object based. I am trying to understand the interworking of WindowsOS security and the use of policies thanks Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87401
  - 25
    - The most powerful computer security tool DiskNumen: www.firmlysoft.com DiskNumen, the most powerful computer security tool, will make everything intact after your reboot even if there are Virus, Hacker,Rascal software, error operation or even your purposive breakage. Your computer can be prevented from any attack by DiskNumen through the way of solidifying disk into CD. Have you ever been anguished by these problems: * Virus software destroy the computer system, leading to the resetting of the system and the decline of the computer running speed; * Once the rascal software interrupt you ,it will exhaust your resources ,besides,the pop-up dialog boxes make you feel disgusted; * The hacker software always hide behind you wondering steal sth from you; * System malfunctions appear frequently due to the mistaken operation of the employees; * Hidden troubles brought by the unauthorized software installation of the employees; * No place to store the top-secret files makes you feel upset; * Large quantities of future troubles turn up resulting the deletion of the top-secret files. ...... Want to get rid of the attack of the virus, hacker and rascal software? Want to store your top-secret files in a safe place? Want to break away from all the problems above? Why not try FirmlySoft? FirmlySoft , the Disk Numen , is a copied file protector . It does the security work of the file and the operating system through the methods below: 1. Solidified Partition : It is to divided and solidify the designated HD into partitions just like CD . It is temporary for you to do any operation to the partitions that is solidified , and it will resume immediately after you turn off the computer . 2. Opened Folders : This function is relative to the Solidified Partition . We often use some catalogues of the Solidified Partition , such as My Document and the Desktop , which are required to be revised and reserved . To this kind of catalogues, you can set them as the Opened Folder , that is to say you can succeed in revising and reserving the catalogues but not affecting your using habit . 3. File Lockfast : It is a perfect place to reserve your top-secret files , without the password no one can scan your files 4. Folder Lock: Since the space of the File Lockfast is limited , to the common files , it is secure to add a lock to your folder. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87397
- Next
  - 1
    - 0 Patches, IE, Firefox I stopped using IE two months ago and only use Firefox. How much should I worry about getting the MS patches? Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87394
  - 2
    - SSIPlatformNT.exe and ssidcpserver.exe Just a question relating to a few processes that i cannot find any information on... Does anyone have any idea what "SSIPlatformNT.exe" and "ssidcpserver.exe" are related to? More importantly, has anyone seen it used as part of a backdoor trojan, or something like that? I googled the heck out of this, trolled through process nam pages and didn't find a thing about it... Thanks for you help Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87388
  - 3
    - Spyware/malware with "-------------" keypress Dear all, I've been bothered by this for few days and i cant carry on with my work now due to this. I'm extremely annoyed. please help. It all started by i downloaded an intcodec from a website. Then, everytime i opened my browser, a page something like "www.securitypage.com" popped out asking me to clear some viruses/malware. Then, i downloaded ewigo anti-spyware and SmitfraudFix (by S!Ri). I followed the instrcutions and somehow successfully removed the spyware using ewigo and Smitfraudix. Now, one more thing happened which i think should be related to the intcodec spyware. Everytime i log on to my Windows (XP SP2), it seems like "----------------" is being pressed automatically. The "--------------" will appear whenever there's a cursor on my IE, Excel, VB6, word and basically all applications which can accept keyboard typing. This symptom is really annoying that i cant even do anything for my work now. I tried top restore my system to the earlier system point but the System Restore didnt work and even make the symptom more severe. Can a kind soul out that do me a favour by showing me way to solve this? THANK YOU VERY VERY MUCH! Albert Leng Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87386
  - 4
    - Task manager and regedit not working Hello. My task manager and regedit are not working. I have tried many methods into trying to get task manager to open, and I have had no luck. I think I had a virus or work that deleted or modified the task manager itself or the registry. I got the virus from limewire, and the details on the virus are: It kept opening limewire by itself and the virus created a folder on my computer called "complete" and files were created in there by the virus, and the files multiplied in great number every minute. I found that "complete" file and deleted the whole thing. It had 15,000 files in it at that point. I also ran 3 different virus scans and they detected 4 viruses and they are all cleaned and my computer is virus free. And that brings me to the Task manager and regedit. They simply do not open. If anybody can help I would be really greatful. Thanks a lot! Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87383
  - 5
    - Security Log viewing Hi everyone, Does anyone know how I can have a regular user see the security log on my Domain Controllers? Can this be done via policy? Or what rights do I need to assign to that user? I know its a dumb question, but I need an answer. Thanks ahead of time. Reggie (reply: rfrancoi@yahoo.com) Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87380
  - 6
    - Access Base Enumeration I posted last week for the following: Can someone please throw me a tip or two as what to check in regards to this folder level security. The Cacls utility & ABEUI utility have been set up. When I go through DOS and use the commands to enable a folder...it says its enabled. When I view the folders I applied the ABE to, I can still see those folders on a users pc. Everyone here has the minimum permissions (READ) to be able to use ABE. Any advice would be appreciated. Thank you. Some other details that I may get pointed in the right direction with this question. This is a new server setup. I have a folder called "Datafiles" that is NOT shared. Inside all folders ARE shared. There are permissions for certain users to access the folder. For example, Permissions tab/Share Permissions are assigned to two people, but under the Security tab, Everyone has permission on that same folder. Is there a problem with this setup? I go to a pc to see if a person can still see after the ABE has been checked, and YES they can. They can't get into the folder though because I have the share on the other two users. This is suppose to be easy... Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87379
  - 7
    - Vb.Net code for user log-on network authentication Does anyone know a concise complete VB.NET Code for user authentication to a network, not a workstation with just username and password? -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-security/200608/1 Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87375
  - 8
    - IPSec and outgoing HTTP Hi all, Been using IPSec along with the basic firewall that is put in front of my co-located server. It all seems to work ok except for outgoing http (80) traffic. Id like to enable this traffic mostly for some ajax type stuff on websites which gather info from various sources using a http link (like rss for instance). I have a policy rule stating that any traffic for port 80 is allowed in and this is mirrored. Web sites work ok. I also use a disallow ALL tcp traffic rule from any IP to my IP. Websites still work. However those sites that try to access other http sites for RSS feeds dont and I also cant browse from the server to any websites. I have also tried writing specific rull allowing outbound (egress) traffic from my IP on port 80 to any IP but it doesnt seem to work. As soon as I disable the ban all IP traffic rule, outbound http on port 80 is ok again. Any ideas why I am getting this conflict..? Thanks all Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87370
  - 9
    - I have just visited a hacked site I was looking at some pix on flickr this morning, went on to read the profile of the photographer, then followed one of the links she gave to one of her sites. It had been hacked, with war photographs. I've sent her a note about it, but I am also concerned that my computer may have been jeopardised in some way through visiting a hacked site. I have a fair mash of security measures in place, but given that I chose to visit the site, suspect they may have been breached,( if something like a virus has been left there.) I would like to know what I can do to check my computer. Maybe it's as simple as just running Symantic/ad aware/spybot scans? Advice would be much appreciated. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87361
  - 10
    - MSN and Webrook S[yweeper When I start my MSN internet connection, I get a dilaog saying that "MSN is trying to change settings...", apparently the security settings of my new Webrook Spysweeper, and ask me to allow MSN to change the settings or to allow the blocking. It says that the application is //@signup.mar@ What is //@signup.mar@ ? Please advise. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87358
  - 11
    - wireless and router; security issue Hi. Since I recently have been studying networking in general, I understand WAN's and LAN's better now. But I have a question about my own network configuration, about what something means, particulary with regard to safety/security, but also in a broader perspective. I'll outline my configuration briefly: ISP is cable company, from cable/wall socket a cable goes to the cable modem, from there a cable goes to the sitecom router, there is a wireless connection, using WPA-PSK encryption, between that router and the adapter on my computer in a different room. No other computers or devices in my network. This morning my computer crashed, and I decided to deinstall and then reinstall my wireless adapater (Sitecom). This may not be clear to you or you may not understand it, but I've decided to omit irrelevant information. When I reinstalled the software of my wireless adapter, I saw, on the software panel of the adapter, under profile setting, profile name and network name, that it said "Sitecom". Just that, nothing else. Since my router uses wireless encryption, I then instructed my adapter to connect to the router, and I gave the adapter the WPA-PSK code it needed to establish a connection with the router. After having done that, on the adapters software "panel", under profile setting, profile name and network name, it showed an entry called "sitecom", and another entry, under profile settings, profile name, name :"<infra-sitecom>", network name Sitecom. Network type: access point, channel N/A (although there was an active connection!) I decided to delete both entries, and to reestablish the connection by choosing site survey, connect, and then I gave the WPA-PSK code. Vitually instantly, a connection was established. Now, under profile setting, it shows profile name <infra sitecom>, network name Sitecom. (Btw, it still stated: channel N/A, while there was an active connection!) So only one entry, instead of the two I had previously. I don't really understand these entries. Please keep my configuration in mind. I didn't see any point in having two entries, and thought that the plain "sitecom" entry might pose a security risk, or that it at least was redundant. So, can anyone shed some light on this ? Is having <Infra Sitecom> as the only entry safe ? Or was the other entry, plainly called "sitecom" of some use to me ? Again, I don't understand this. With this only entry, the wireless connection seems to work perfectly, and I have had it configured that way for many months. Also, I configured my McAfee firewall 7.x as a home network, and instructed it to NOT trust my home network. Yet, mysteriously, I sometimes get log entries in the log of incoming traffic (described as "unwanted connection attempts", sorry, crude translation), although my router SEEMS to have a firewall, according to several tests. Is there any connection between this and what I stated in the previous paragraphs ? Advice/insight appreciated. Thanks. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87357
  - 12
    - Freeaddrinfo, help I get an intermittent error about every ten minutes that says "The procedure entry point freeaddrinfo could not be located in the dynamic link library WS2_32.dll" I have searched through Microsoft and get all sorts of info but nothing I can understand! Help me to get rid, please. It's been going on for a months now and it driving me insane. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87350
  - 13
    - adware I have windows defender (Beta 2). There is an adware that when I try to remove from my computer I keep getting an error message. The adware is called (begin 2search.big traffic net). The status always fails and the number that show up is 0x80508021. Does anyone have any suggestion on how can I find what file it's from or a nother options to get it off my computer. Windows defender will not get rid of it, fail message always comes up. Thanks liz Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87348
  - 14
    - Can I access users from another PC in a workgroup? Hi all, I've got 2 PC's which are in the same workgroup. I would like to be able to access each computer from the other without having to share all drives/directories. I've got a feeling that this isn't a safe option, especially when connected to the internet. So I thought if I add the administrator from PC1 to the Administrators group on PC2 that I should be able to access the drives. However I can't add a user from PC1 to a group on PC2, it doesn't understand the user's location and I cannot set the location to the other PC. Can anyone give me pointers or help me out? TIA, Friso Wiskerke Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87340
  - 15
    - Can malware migrate thru folders? hi Guys, We often are saving clients data/documents from infected PCs onto USB hard-drives. I used to scan them under my Windows system, but my partner is paranoid that some trojans etc are capable of leaping out & infecting my system, so she scans under Linux. I imagine that there may be bits & pieces of malware but... aren't they disconnected from the OS? Can an .exe run itself? Cheers Tom Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87339
  - 16
    - viewing websites using a proxy site hi my sister has just found out she can view the restircted websites that i have blocked by using a proxy website (i.e superproxy). This is now bugging me! does anyone know of a way i can stop this? we curretnly use internet explorer 6 to use the net and i have norton internet sercuity 2005 installed on the machine thanks robert Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87317
  - 17
    - Recovering encrypted files after reinstalling Windows I had to reinstall Windows XP Professional today but I forgot to unencrypt some file before I did the reinstallation. Now I can't access those files. Is there any way that I can access those files? -- Herb Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87307
  - 18
    - Virus Response Plan Gurus, Most of you MVPs, Helpdesk and System Engineer types most likely work in large private corporations, or some level of state or government. That said, do any of you have a virus response plan in place such that when your central Virus monitoring system (be it the Symantec System Center Alert Management Console or whatever) sends out a virus alert that a machine has been compromised such that the virus could not be removed or quarantined then an IT incident-responder (be it a helpdesk or field technician) hits the floor, finds the workstation and executes a written set of procedures to clean the virus or wipe the machine and re-load the OS. I am looking for whatever someone has written up so that I can get a head-start on this writing assignment my manager has dumped on me. :-) -- Spin Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87303
  - 19
    - FIREWALL GREYED OUT Anybody have suggestions on how to get my firewall packaged with Windows XP Home edition to work? No matter what I try it stays greyed out. Virus protection and updates work fine just the firewall can't be turned on. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87302
  - 20
    - Access Based Enumeration (ABE) Can someone please throw me a tip or two as what to check in regards to this folder level security. The Cacls utility & ABEUI utility have been set up. When I go through DOS and use the commands to enable a folder...it says its enabled. When I view the folders I applied the ABE to, I can still see those folders on a users pc. Everyone here has the minimum permissions (READ) to be able to use ABE. Any advice would be appreciated. Thank you. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87301
  - 21
    - Internal Trusted Windows Users firewalled from Microsoft Servers I would like some advice. We have a Security Manager at our company who wants to separate all user desktops in our organisation from Exchange and Active Directory and all Microsoft services with a Checkpoint Firewall. We would need to configure the NG60 Checkpoint firewall with a ruleset that would allow the user desktop groups which are split into 8 Vlans to access all Exchange ports including the RPC range as well as the Active Directory services. My question is this do many organisations place firewalls between all their trusted users and their Exchange, AD and Windows servers. While I can see the added security aspects of the plan, the added administration overhead seems problematic as well as the performance impact. Particularly when we are talking about all our internal Microsoft services and UNIX services. Just to clarify these are all internal trusted users accesing internal systems, we are a company with under a 1000 users. This does not refer to DMZ's which are firewalled from internal users. Anyones experience or refrence to articles whitepapers would be much appreciated. Thanks Ash -- Ash -- Ash Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87297
  - 22
    - Defender Update Notification Every day for the last week I have got an automatic notification that an update is available for Defender. I have downloaded and installed 4 times & each time have got the message "Update successful". When I run the programmes 'check for update' I get back "no updates available", when I go to MS Update site it shows no updates needed - but the next day auto update message re-appears in the notification area. Details shown in programme Help/ About are :- Version 1.1.1347.0 Engine 1.1.1560.0 Def. 1.14.1650.11 Although not a major problem it is getting very annoying. Has anybody any answers to how to stop this happening? -- rosellie Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87291
  - 23
    - Applying Update KB902400 with /B:SP2QFE Hi, I need to apply the update KB902400 as specified in http://www.microsoft.com/technet/Security/tools/mbsa2/qa.mspx under the question 'How can I scan a computer that is protected by a firewall?' which details that you must use the /B:SP2QFE command line option. I have downloaded the update, and extracted it, however it's an .exe file, which extracts to a folder containing update.exe and all the files, rather than an MSI file. How can I push out this update to all workstations in our domain, as its not an MSI? I've currently set up a line in our login script to run the install silently from a network share. However the problem I have with this is that not all our people are in at the same time, we might have 1 person in only once a week, or another in every other day, so I have to keep the line in the login script until I know everyone has had it applied. This means that for people who have already had it applied, the update gets reapplied every time they login and the login remains very slow. We already run WSUS, which said that it had already applied KB902400 to every workstation on our domain, however when I tried to scan workstations with MBSA 2.0, the scan failed, after re-applying 902400 using the /B:SP2QFE switch, it worked, so I gather the switch is required for the update to allow MBSA scans to work. Any help much appreciated. Ben Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87281
  - 24
    - setting logon details I am running xp pro and at the moment my pc boots straight into desktop bypassing windows logon. At the moment I am logged in as Administrator and have everything set up the way I want it. My children have been accessing my pc and interfereing with my settings and programs etc etc. How do I set up accounts for all of them seperatly so that they do not have access to my account? I also wish to transfer all of my administrator account details to a new named account but still of course with administrator privaleges. ie Dad (administrator) with current settings Haley Tom Mum Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87280
  - 25
    - snpstd vnspstd What are these, a google search shows web pages that look like fly-by-night security pages, and ofcourse all say the same thing "Threat level - 0" All but 1 site that says its a trojan, and it very well could be cause I hap hazzardly DL and explore, thats what us geeks do, even knowing that we will end up asking what x.exe is. lol So, my question is what do they do. I dont see anything in netstat -b and zonealarm never asks me to allow it.... so is it a valid process or a trojan/malware. Thanks in advaned. -- God bless Bill Gates. Tag: Cisco PIX woes with MS Cert Service on Windows 2000 Tag: 87278

To all, we have our certificate service running standalone mode on one
of our Windows 2000 servers. Among other things, we use the Cert Svr
to issues certificates to our Cisco networking products, e.g., our PIX,
via the mscep.

Here is the problem, our CA certificate was successfully renewed.
However, the Certificate Server's RA encryption and signing
certificates have expired. I see no way to cause them to be renewed.
If anyone can provide a clue or a pointer on how to renew these
certificates the help would be appreciated.

Re: Cisco PIX woes with MS Cert Service on Windows 2000 by www

www
Sat Aug 26 00:06:37 CDT 2006

You may wish to investigate the Tek-Tips Microsoft Windows 2000 Server
Forum:

http://www.tek-tips.com/threadminder.cfm?pid=96

Hope this helps.

Brad Reese
Cisco IOS Software - Compatible Partner Matrix by Technology
http://www.BradReese.Com
1293 Hendersonville Road, Suite 17
Asheville, North Carolina USA 28803
USA & Canada: 877-549-2680
International: 828-277-7272
Fax: 775-254-3558
AIM: R2MGrant
BradReese.Com - Global Cisco Systems Pre-Sales Support
http://www.bradreese.com/contact-us.htm#CISCO

Re: Cisco PIX woes with MS Cert Service on Windows 2000 by Ken

Ken
Sat Aug 26 01:53:05 CDT 2006

Thanks for the suggestion Brad.

To follow up with this problem:

The solution to getting new RA certs is to reinstall the mscep utility.
It generates the RA certs each time it is installed. You don't have to
uninstall it; just run the installer again.

This solution was provided by the good people at Microsoft Professional
Support Services.

www.BradReese.Com wrote:
> You may wish to investigate the Tek-Tips Microsoft Windows 2000 Server
> Forum:
>
> http://www.tek-tips.com/threadminder.cfm?pid=96
>
> Hope this helps.
>
> Brad Reese
> Cisco IOS Software - Compatible Partner Matrix by Technology
> http://www.BradReese.Com
> 1293 Hendersonville Road, Suite 17
> Asheville, North Carolina USA 28803
> USA & Canada: 877-549-2680
> International: 828-277-7272
> Fax: 775-254-3558
> AIM: R2MGrant
> BradReese.Com - Global Cisco Systems Pre-Sales Support
> http://www.bradreese.com/contact-us.htm#CISCO